$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/bVJR3WqfD5u6Q5envkOHkcjjnwo.roa File: bVJR3WqfD5u6Q5envkOHkcjjnwo.roa (raw, json) Hash identifier: Y3RcWWe2kf0vTbC24QsXA9vDw9BhxwTvdevNi1GjmfQ= Subject key identifier: 6D:52:51:DD:6A:9F:0F:9B:BA:43:97:A7:BE:43:87:91:C8:E3:9F:0A Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1C93 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/bVJR3WqfD5u6Q5envkOHkcjjnwo.roa Signing time: Thu 17 Jul 2025 03:48:03 +0000 ROA not before: Thu 17 Jul 2025 03:48:03 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 25734 IP address blocks: 103.220.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 18:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7315 (0x1c93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Jul 17 03:48:03 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=6D5251DD6A9F0F9BBA4397A7BE438791C8E39F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:14:d2:cd:bb:79:e7:f3:52:e6:8d:9b:2d: cc:61:76:8d:55:57:9b:18:11:b3:15:d5:6a:48:af: 2a:e7:25:c3:f3:54:7e:01:60:f3:fb:42:23:62:84: 9e:f8:03:ab:72:39:83:1b:35:1b:93:cd:1b:3e:5b: 57:ca:ca:89:0a:39:c7:7a:d2:0e:94:70:25:ed:5a: 5c:3a:de:bc:50:9d:ba:fb:94:d6:3d:d1:0d:ea:89: bd:a4:93:8b:a1:0a:38:db:a0:01:2c:95:c8:f7:2f: fd:ba:69:04:fc:dc:c5:b3:d6:fa:ac:9d:02:ba:82: a8:0f:39:3b:b1:69:10:7e:44:87:fe:66:f9:7e:61: 8a:f3:f3:1e:63:dc:7f:15:bd:a5:10:2d:a5:e8:f9: f7:61:d5:a4:52:a6:1e:ee:c9:68:54:cf:e8:e1:15: 0d:26:8f:a2:2f:91:91:f5:10:e9:c4:6e:47:90:83: e5:ee:97:c7:5b:2c:4e:f3:91:1f:0b:c2:18:9e:c2: 16:86:31:cf:a7:61:cf:a7:d1:5d:bb:56:1b:51:f6: cb:cb:40:51:33:f8:3c:3e:0e:06:3e:40:82:fc:5d: 18:c7:2e:1a:4c:52:d3:fa:62:f4:a2:6a:31:bb:c8: 31:3e:46:50:8f:46:3d:a0:3e:7e:c3:9a:3a:52:bb: d2:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:52:51:DD:6A:9F:0F:9B:BA:43:97:A7:BE:43:87:91:C8:E3:9F:0A X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/bVJR3WqfD5u6Q5envkOHkcjjnwo.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.220.248.0/22 Signature Algorithm: sha256WithRSAEncryption a2:24:01:78:f0:ef:25:e5:06:56:12:44:72:e5:19:32:47:03: 52:de:f8:ae:4f:f7:f0:ad:9c:7f:0c:44:aa:f4:e1:a8:95:06: 4a:60:68:d7:51:d8:4d:05:54:71:99:74:19:42:d6:dc:4b:7d: 90:bc:b9:34:42:57:99:6c:ba:d7:56:61:b8:12:07:37:6e:45: 6a:d7:93:71:17:7b:e1:9e:1e:bf:ea:7d:0f:ab:44:87:0a:bc: 79:fa:18:e6:84:5d:c3:26:6b:23:ea:ab:6e:30:03:85:c6:6d: 72:e5:02:61:cd:8f:bd:20:d5:35:20:27:aa:3d:ae:95:e6:b4: 35:09:0e:0b:71:0b:37:e0:1f:c7:c6:92:44:5a:fe:03:7c:3c: 44:c7:b1:70:5e:a4:07:75:f6:83:b1:e8:d8:f0:0b:95:27:43: 78:98:44:80:64:77:f8:57:ff:0f:90:fd:a5:c9:64:a4:1c:ab: 25:08:a5:4c:4e:71:a9:72:6c:5d:6e:f1:77:fc:f5:bd:6f:4b: de:a8:67:b3:7c:22:03:cf:f7:08:cb:9c:75:f3:50:f4:66:1c: 5f:bf:1b:98:7e:e2:45:cb:15:71:38:3b:36:dd:df:ea:33:0a: 71:80:17:18:cf:87:6d:9b:a7:24:09:ab:0a:8b:6c:1e:01:89: 91:62:2b:44 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA3MTcw MzQ4MDNaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDZENTI1MURENkE5RjBG OUJCQTQzOTdBN0JFNDM4NzkxQzhFMzlGMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHNxTSzbt55/NS5o2bLcxhdo1VV5sYEbMV1WpIryrnJcPzVH4B YPP7QiNihJ74A6tyOYMbNRuTzRs+W1fKyokKOcd60g6UcCXtWlw63rxQnbr7lNY9 0Q3qib2kk4uhCjjboAEslcj3L/26aQT83MWz1vqsnQK6gqgPOTuxaRB+RIf+Zvl+ YYrz8x5j3H8VvaUQLaXo+fdh1aRSph7uyWhUz+jhFQ0mj6IvkZH1EOnEbkeQg+Xu l8dbLE7zkR8LwhiewhaGMc+nYc+n0V27VhtR9svLQFEz+Dw+DgY+QIL8XRjHLhpM UtP6YvSiajG7yDE+RlCPRj2gPn7DmjpSu9IDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUbVJR3WqfD5u6Q5envkOHkcjjnwowHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2JWSlIzV3FmRDV1NlE1 ZW52a09Ia2Nqam53by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn3PgwDQYJKoZIhvcNAQELBQADggEBAKIkAXjw7yXlBlYSRHLlGTJHA1Le+K5P 9/CtnH8MRKr04aiVBkpgaNdR2E0FVHGZdBlC1txLfZC8uTRCV5lsutdWYbgSBzdu RWrXk3EXe+GeHr/qfQ+rRIcKvHn6GOaEXcMmayPqq24wA4XGbXLlAmHNj70g1TUg J6o9rpXmtDUJDgtxCzfgH8fGkkRa/gN8PETHsXBepAd19oOx6NjwC5UnQ3iYRIBk d/hX/w+Q/aXJZKQcqyUIpUxOcalybF1u8Xf89b1vS96oZ7N8IgPP9wjLnHXzUPRm HF+/G5h+4kXLFXE4Ozbd3+ozCnGAFxjPh22bpyQJqwqLbB4BiZFiK0Q= -----END CERTIFICATE-----Generated at Mon Jul 21 13:38:11 2025 by rpki-client